@xrkseek/harness 0.6.3 → 0.6.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/node_modules/@xrkseek/core-agent/dist/index.d.ts +6 -2
- package/node_modules/@xrkseek/core-agent/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/core-agent/dist/index.js +6 -0
- package/node_modules/@xrkseek/core-agent/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/core-agent-loop/dist/compaction.d.ts.map +1 -1
- package/node_modules/@xrkseek/core-agent-loop/dist/compaction.js +9 -0
- package/node_modules/@xrkseek/core-agent-loop/dist/compaction.js.map +1 -1
- package/node_modules/@xrkseek/core-agent-loop/dist/index.d.ts +23 -5
- package/node_modules/@xrkseek/core-agent-loop/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/core-agent-loop/dist/index.js +91 -11
- package/node_modules/@xrkseek/core-agent-loop/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/core-session/dist/compaction.d.ts +30 -0
- package/node_modules/@xrkseek/core-session/dist/compaction.d.ts.map +1 -1
- package/node_modules/@xrkseek/core-session/dist/compaction.js +15 -0
- package/node_modules/@xrkseek/core-session/dist/compaction.js.map +1 -1
- package/node_modules/@xrkseek/core-session/dist/index.d.ts +1 -1
- package/node_modules/@xrkseek/core-session/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/core-session/dist/index.js +1 -1
- package/node_modules/@xrkseek/core-session/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/core-session/dist/search-text.d.ts.map +1 -1
- package/node_modules/@xrkseek/core-session/dist/search-text.js +6 -0
- package/node_modules/@xrkseek/core-session/dist/search-text.js.map +1 -1
- package/node_modules/@xrkseek/core-session/dist/sqlite-store.d.ts +5 -2
- package/node_modules/@xrkseek/core-session/dist/sqlite-store.d.ts.map +1 -1
- package/node_modules/@xrkseek/core-session/dist/sqlite-store.js +155 -29
- package/node_modules/@xrkseek/core-session/dist/sqlite-store.js.map +1 -1
- package/node_modules/@xrkseek/core-tools/dist/std-tools.d.ts.map +1 -1
- package/node_modules/@xrkseek/core-tools/dist/std-tools.js +2 -1
- package/node_modules/@xrkseek/core-tools/dist/std-tools.js.map +1 -1
- package/node_modules/@xrkseek/core-tools/dist/tool-exposure.d.ts +6 -2
- package/node_modules/@xrkseek/core-tools/dist/tool-exposure.d.ts.map +1 -1
- package/node_modules/@xrkseek/core-tools/dist/tool-exposure.js +10 -3
- package/node_modules/@xrkseek/core-tools/dist/tool-exposure.js.map +1 -1
- package/node_modules/@xrkseek/exec-environment/dist/http.d.ts.map +1 -1
- package/node_modules/@xrkseek/exec-environment/dist/http.js +2 -0
- package/node_modules/@xrkseek/exec-environment/dist/http.js.map +1 -1
- package/node_modules/@xrkseek/exec-environment/dist/memory.d.ts.map +1 -1
- package/node_modules/@xrkseek/exec-environment/dist/memory.js +13 -9
- package/node_modules/@xrkseek/exec-environment/dist/memory.js.map +1 -1
- package/node_modules/@xrkseek/exec-fs/dist/edit-text.d.ts +6 -1
- package/node_modules/@xrkseek/exec-fs/dist/edit-text.d.ts.map +1 -1
- package/node_modules/@xrkseek/exec-fs/dist/edit-text.js +139 -11
- package/node_modules/@xrkseek/exec-fs/dist/edit-text.js.map +1 -1
- package/node_modules/@xrkseek/exec-fs/dist/index.d.ts +7 -2
- package/node_modules/@xrkseek/exec-fs/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/exec-fs/dist/index.js +36 -9
- package/node_modules/@xrkseek/exec-fs/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/exec-fs/dist/open-nofollow.d.ts +13 -0
- package/node_modules/@xrkseek/exec-fs/dist/open-nofollow.d.ts.map +1 -0
- package/node_modules/@xrkseek/exec-fs/dist/open-nofollow.js +90 -0
- package/node_modules/@xrkseek/exec-fs/dist/open-nofollow.js.map +1 -0
- package/node_modules/@xrkseek/exec-pty/dist/env.d.ts +3 -23
- package/node_modules/@xrkseek/exec-pty/dist/env.d.ts.map +1 -1
- package/node_modules/@xrkseek/exec-pty/dist/env.js +3 -48
- package/node_modules/@xrkseek/exec-pty/dist/env.js.map +1 -1
- package/node_modules/@xrkseek/exec-pty/package.json +2 -1
- package/node_modules/@xrkseek/exec-ssh/dist/fs.d.ts.map +1 -1
- package/node_modules/@xrkseek/exec-ssh/dist/fs.js +2 -1
- package/node_modules/@xrkseek/exec-ssh/dist/fs.js.map +1 -1
- package/node_modules/@xrkseek/exec-subprocess/dist/env.d.ts +26 -0
- package/node_modules/@xrkseek/exec-subprocess/dist/env.d.ts.map +1 -0
- package/node_modules/@xrkseek/exec-subprocess/dist/env.js +65 -0
- package/node_modules/@xrkseek/exec-subprocess/dist/env.js.map +1 -0
- package/node_modules/@xrkseek/exec-subprocess/dist/index.d.ts +1 -0
- package/node_modules/@xrkseek/exec-subprocess/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/exec-subprocess/dist/index.js +5 -1
- package/node_modules/@xrkseek/exec-subprocess/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/llm/dist/failure.d.ts.map +1 -1
- package/node_modules/@xrkseek/llm/dist/failure.js +7 -2
- package/node_modules/@xrkseek/llm/dist/failure.js.map +1 -1
- package/node_modules/@xrkseek/llm/dist/index.d.ts +1 -0
- package/node_modules/@xrkseek/llm/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/llm/dist/index.js +1 -0
- package/node_modules/@xrkseek/llm/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/llm/dist/retry-policy.js +1 -1
- package/node_modules/@xrkseek/llm/dist/retry-policy.js.map +1 -1
- package/node_modules/@xrkseek/llm/dist/trace-context.d.ts +32 -0
- package/node_modules/@xrkseek/llm/dist/trace-context.d.ts.map +1 -0
- package/node_modules/@xrkseek/llm/dist/trace-context.js +89 -0
- package/node_modules/@xrkseek/llm/dist/trace-context.js.map +1 -0
- package/node_modules/@xrkseek/llm-anthropic/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/llm-anthropic/dist/index.js +3 -3
- package/node_modules/@xrkseek/llm-anthropic/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/llm-gemini/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/llm-gemini/dist/index.js +3 -3
- package/node_modules/@xrkseek/llm-gemini/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/llm-openai-compatible/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/llm-openai-compatible/dist/index.js +2 -2
- package/node_modules/@xrkseek/llm-openai-compatible/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/llm-openai-responses/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/llm-openai-responses/dist/index.js +3 -3
- package/node_modules/@xrkseek/llm-openai-responses/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/llm-registry/dist/discover.d.ts +11 -0
- package/node_modules/@xrkseek/llm-registry/dist/discover.d.ts.map +1 -1
- package/node_modules/@xrkseek/llm-registry/dist/discover.js +61 -0
- package/node_modules/@xrkseek/llm-registry/dist/discover.js.map +1 -1
- package/node_modules/@xrkseek/llm-registry/dist/index.d.ts +1 -1
- package/node_modules/@xrkseek/llm-registry/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/llm-registry/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/policy/dist/index.d.ts +1 -0
- package/node_modules/@xrkseek/policy/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/policy/dist/index.js +1 -0
- package/node_modules/@xrkseek/policy/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/policy/dist/ruleset.d.ts +6 -0
- package/node_modules/@xrkseek/policy/dist/ruleset.d.ts.map +1 -1
- package/node_modules/@xrkseek/policy/dist/ruleset.js +67 -14
- package/node_modules/@xrkseek/policy/dist/ruleset.js.map +1 -1
- package/node_modules/@xrkseek/policy/dist/schema.d.ts +6 -0
- package/node_modules/@xrkseek/policy/dist/schema.d.ts.map +1 -1
- package/node_modules/@xrkseek/policy/dist/schema.js +6 -0
- package/node_modules/@xrkseek/policy/dist/schema.js.map +1 -1
- package/node_modules/@xrkseek/policy/dist/when-expr.d.ts +30 -0
- package/node_modules/@xrkseek/policy/dist/when-expr.d.ts.map +1 -0
- package/node_modules/@xrkseek/policy/dist/when-expr.js +514 -0
- package/node_modules/@xrkseek/policy/dist/when-expr.js.map +1 -0
- package/node_modules/@xrkseek/preset-harness/dist/preset.d.ts.map +1 -1
- package/node_modules/@xrkseek/preset-harness/dist/preset.js +68 -14
- package/node_modules/@xrkseek/preset-harness/dist/preset.js.map +1 -1
- package/node_modules/@xrkseek/preset-harness/dist/tsconfig.tsbuildinfo +1 -1
- package/node_modules/@xrkseek/preset-minimal/dist/tsconfig.tsbuildinfo +1 -1
- package/node_modules/@xrkseek/preset-server/dist/tsconfig.tsbuildinfo +1 -1
- package/node_modules/@xrkseek/protocol/dist/session-events.d.ts +3 -3
- package/node_modules/@xrkseek/server-face/dist/adapt/index.d.ts +1 -1
- package/node_modules/@xrkseek/server-face/dist/adapt/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/adapt/index.js +1 -1
- package/node_modules/@xrkseek/server-face/dist/adapt/index.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/adapt/subagent-notice.d.ts +15 -1
- package/node_modules/@xrkseek/server-face/dist/adapt/subagent-notice.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/adapt/subagent-notice.js +108 -8
- package/node_modules/@xrkseek/server-face/dist/adapt/subagent-notice.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/context.d.ts +5 -0
- package/node_modules/@xrkseek/server-face/dist/context.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/handlers/session.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/handlers/session.js +69 -19
- package/node_modules/@xrkseek/server-face/dist/handlers/session.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/handlers/subagent.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/handlers/subagent.js +7 -1
- package/node_modules/@xrkseek/server-face/dist/handlers/subagent.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/index.d.ts +3 -2
- package/node_modules/@xrkseek/server-face/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/index.js +3 -2
- package/node_modules/@xrkseek/server-face/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/model-catalog.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/model-catalog.js +2 -1
- package/node_modules/@xrkseek/server-face/dist/model-catalog.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/peer-session-wait.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/peer-session-wait.js +16 -9
- package/node_modules/@xrkseek/server-face/dist/peer-session-wait.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/ralph-tool.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/ralph-tool.js +19 -20
- package/node_modules/@xrkseek/server-face/dist/ralph-tool.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/runtime.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/runtime.js +58 -13
- package/node_modules/@xrkseek/server-face/dist/runtime.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/select-session-model.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/select-session-model.js +33 -1
- package/node_modules/@xrkseek/server-face/dist/select-session-model.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/session-thread-message.d.ts +5 -0
- package/node_modules/@xrkseek/server-face/dist/session-thread-message.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/session-thread-message.js +8 -0
- package/node_modules/@xrkseek/server-face/dist/session-thread-message.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/session-thread-tools.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/session-thread-tools.js +4 -1
- package/node_modules/@xrkseek/server-face/dist/session-thread-tools.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/settings-schemas.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/settings-schemas.js +32 -5
- package/node_modules/@xrkseek/server-face/dist/settings-schemas.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/subagent-registry.d.ts +7 -0
- package/node_modules/@xrkseek/server-face/dist/subagent-registry.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/subagent-registry.js +21 -5
- package/node_modules/@xrkseek/server-face/dist/subagent-registry.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/subagent-tools.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/subagent-tools.js +79 -149
- package/node_modules/@xrkseek/server-face/dist/subagent-tools.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/wait-drain-idle.d.ts +32 -0
- package/node_modules/@xrkseek/server-face/dist/wait-drain-idle.d.ts.map +1 -0
- package/node_modules/@xrkseek/server-face/dist/wait-drain-idle.js +138 -0
- package/node_modules/@xrkseek/server-face/dist/wait-drain-idle.js.map +1 -0
- package/node_modules/@xrkseek/server-face/dist/wire/index.d.ts +1 -1
- package/node_modules/@xrkseek/server-face/dist/wire/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/wire/index.js +1 -1
- package/node_modules/@xrkseek/server-face/dist/wire/index.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/wire/loopback.d.ts +5 -0
- package/node_modules/@xrkseek/server-face/dist/wire/loopback.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/wire/loopback.js +14 -0
- package/node_modules/@xrkseek/server-face/dist/wire/loopback.js.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/workspace-orchestrate-tools.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-face/dist/workspace-orchestrate-tools.js +2 -1
- package/node_modules/@xrkseek/server-face/dist/workspace-orchestrate-tools.js.map +1 -1
- package/node_modules/@xrkseek/server-host/dist/agent-cache.d.ts +26 -4
- package/node_modules/@xrkseek/server-host/dist/agent-cache.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-host/dist/agent-cache.js +63 -16
- package/node_modules/@xrkseek/server-host/dist/agent-cache.js.map +1 -1
- package/node_modules/@xrkseek/server-host/dist/index.d.ts +1 -1
- package/node_modules/@xrkseek/server-host/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-host/dist/index.js +98 -25
- package/node_modules/@xrkseek/server-host/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/server-host/dist/workflow-engine-mount.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-host/dist/workflow-engine-mount.js +16 -21
- package/node_modules/@xrkseek/server-host/dist/workflow-engine-mount.js.map +1 -1
- package/node_modules/@xrkseek/server-http/dist/dsh-compat/auto-review-classifier.d.ts +2 -2
- package/node_modules/@xrkseek/server-http/dist/dsh-compat/auto-review-classifier.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-http/dist/dsh-compat/auto-review-classifier.js +7 -1
- package/node_modules/@xrkseek/server-http/dist/dsh-compat/auto-review-classifier.js.map +1 -1
- package/node_modules/@xrkseek/server-http/dist/dsh-compat/community-llm-host-sync.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-http/dist/dsh-compat/community-llm-host-sync.js +49 -11
- package/node_modules/@xrkseek/server-http/dist/dsh-compat/community-llm-host-sync.js.map +1 -1
- package/node_modules/@xrkseek/server-loader/dist/index.d.ts +1 -1
- package/node_modules/@xrkseek/server-loader/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-loader/dist/index.js +1 -1
- package/node_modules/@xrkseek/server-loader/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/server-loader/dist/shell-hooks.d.ts +31 -1
- package/node_modules/@xrkseek/server-loader/dist/shell-hooks.d.ts.map +1 -1
- package/node_modules/@xrkseek/server-loader/dist/shell-hooks.js +126 -14
- package/node_modules/@xrkseek/server-loader/dist/shell-hooks.js.map +1 -1
- package/node_modules/@xrkseek/session-projection/dist/index.d.ts +7 -0
- package/node_modules/@xrkseek/session-projection/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/session-projection/dist/index.js +16 -0
- package/node_modules/@xrkseek/session-projection/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/workspace/dist/durable-inject.d.ts +10 -0
- package/node_modules/@xrkseek/workspace/dist/durable-inject.d.ts.map +1 -1
- package/node_modules/@xrkseek/workspace/dist/durable-inject.js +38 -0
- package/node_modules/@xrkseek/workspace/dist/durable-inject.js.map +1 -1
- package/node_modules/@xrkseek/workspace/dist/ecosystem-instructions.d.ts.map +1 -1
- package/node_modules/@xrkseek/workspace/dist/ecosystem-instructions.js +23 -11
- package/node_modules/@xrkseek/workspace/dist/ecosystem-instructions.js.map +1 -1
- package/node_modules/@xrkseek/workspace/dist/index.d.ts +1 -0
- package/node_modules/@xrkseek/workspace/dist/index.d.ts.map +1 -1
- package/node_modules/@xrkseek/workspace/dist/index.js +1 -0
- package/node_modules/@xrkseek/workspace/dist/index.js.map +1 -1
- package/node_modules/@xrkseek/workspace/dist/scan-guards.d.ts +21 -0
- package/node_modules/@xrkseek/workspace/dist/scan-guards.d.ts.map +1 -1
- package/node_modules/@xrkseek/workspace/dist/scan-guards.js +48 -0
- package/node_modules/@xrkseek/workspace/dist/scan-guards.js.map +1 -1
- package/node_modules/@xrkseek/workspace/dist/skill-select.d.ts +29 -0
- package/node_modules/@xrkseek/workspace/dist/skill-select.d.ts.map +1 -0
- package/node_modules/@xrkseek/workspace/dist/skill-select.js +77 -0
- package/node_modules/@xrkseek/workspace/dist/skill-select.js.map +1 -0
- package/package.json +1 -1
|
@@ -51,6 +51,65 @@ function capacity(...candidates) {
|
|
|
51
51
|
}
|
|
52
52
|
return undefined;
|
|
53
53
|
}
|
|
54
|
+
/**
|
|
55
|
+
* OFM openai-gateway and DSH pi-ai put thinking menus on listing rows.
|
|
56
|
+
* Keep ids as the provider's wire values (`on`/`off`, not only OpenAI canonical).
|
|
57
|
+
*/
|
|
58
|
+
function reasoningFromListing(entry) {
|
|
59
|
+
const nested = entry.reasoning;
|
|
60
|
+
const source = nested && typeof nested === "object" && !Array.isArray(nested)
|
|
61
|
+
? nested
|
|
62
|
+
: entry;
|
|
63
|
+
if (source.reasoningEfforts === false)
|
|
64
|
+
return undefined;
|
|
65
|
+
const list = Array.isArray(source.efforts)
|
|
66
|
+
? source.efforts
|
|
67
|
+
: Array.isArray(source.reasoningEfforts)
|
|
68
|
+
? source.reasoningEfforts
|
|
69
|
+
: undefined;
|
|
70
|
+
if (!list || list.length === 0)
|
|
71
|
+
return undefined;
|
|
72
|
+
const efforts = [];
|
|
73
|
+
for (const item of list) {
|
|
74
|
+
if (typeof item === "string" && item.trim()) {
|
|
75
|
+
const id = item.trim();
|
|
76
|
+
efforts.push({
|
|
77
|
+
id,
|
|
78
|
+
name: id.charAt(0).toUpperCase() + id.slice(1),
|
|
79
|
+
});
|
|
80
|
+
continue;
|
|
81
|
+
}
|
|
82
|
+
if (!item || typeof item !== "object" || Array.isArray(item))
|
|
83
|
+
continue;
|
|
84
|
+
const row = item;
|
|
85
|
+
const id = typeof row.id === "string" ? row.id.trim() : "";
|
|
86
|
+
if (!id)
|
|
87
|
+
continue;
|
|
88
|
+
const name = typeof row.name === "string" && row.name.trim()
|
|
89
|
+
? row.name.trim()
|
|
90
|
+
: id.charAt(0).toUpperCase() + id.slice(1);
|
|
91
|
+
const description = typeof row.description === "string" && row.description.trim()
|
|
92
|
+
? row.description.trim()
|
|
93
|
+
: undefined;
|
|
94
|
+
efforts.push({
|
|
95
|
+
id,
|
|
96
|
+
name,
|
|
97
|
+
...(description !== undefined ? { description } : {}),
|
|
98
|
+
});
|
|
99
|
+
}
|
|
100
|
+
if (efforts.length === 0)
|
|
101
|
+
return undefined;
|
|
102
|
+
const defaultRaw = source.defaultEffort ?? source.defaultReasoningEffort ?? source.default;
|
|
103
|
+
const defaultEffort = typeof defaultRaw === "string" &&
|
|
104
|
+
defaultRaw.trim() &&
|
|
105
|
+
efforts.some((effort) => effort.id === defaultRaw.trim())
|
|
106
|
+
? defaultRaw.trim()
|
|
107
|
+
: undefined;
|
|
108
|
+
return {
|
|
109
|
+
efforts,
|
|
110
|
+
...(defaultEffort !== undefined ? { defaultEffort } : {}),
|
|
111
|
+
};
|
|
112
|
+
}
|
|
54
113
|
/**
|
|
55
114
|
* Read one supported model-listing reply. The standard `data` array takes
|
|
56
115
|
* precedence when both formats are present. An enriched `models` map uses each
|
|
@@ -87,11 +146,13 @@ function readListing(body) {
|
|
|
87
146
|
const name = label(entry.name, entry.display_name, entry.displayName) ?? id;
|
|
88
147
|
const contextWindow = capacity(entry.contextWindow, entry.context_window, entry.context_length, entry.max_input_tokens, entry.limit?.context);
|
|
89
148
|
const maxTokens = capacity(entry.maxOutputTokens, entry.max_output_tokens, entry.maxTokens, entry.max_tokens, entry.limit?.output, entry.top_provider?.max_completion_tokens);
|
|
149
|
+
const reasoning = reasoningFromListing(entry);
|
|
90
150
|
models.push({
|
|
91
151
|
id,
|
|
92
152
|
name,
|
|
93
153
|
...(contextWindow !== undefined ? { contextWindow } : {}),
|
|
94
154
|
...(maxTokens !== undefined ? { maxTokens } : {}),
|
|
155
|
+
...(reasoning !== undefined ? { reasoning } : {}),
|
|
95
156
|
});
|
|
96
157
|
}
|
|
97
158
|
return models;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"discover.js","sourceRoot":"","sources":["../src/discover.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAEvC,uEAAuE;AACvE,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAEnC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,EAAE;IACF,aAAa;IACb,oBAAoB;IACpB,mBAAmB;IACnB,kBAAkB;IAClB,oBAAoB;CACrB,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"discover.js","sourceRoot":"","sources":["../src/discover.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAEvC,uEAAuE;AACvE,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAEnC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,EAAE;IACF,aAAa;IACb,oBAAoB;IACpB,mBAAmB;IACnB,kBAAkB;IAClB,oBAAoB;CACrB,CAAC,CAAC;AA+BH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,GAAG,kBAAkB,CAAC;IACnC,YAAY,OAAe,EAAE,OAAsB;QACjD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,OAAe,EAAE,GAAW;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,GAAG,KAAK,oBAAoB;QAAE,OAAO,GAAG,IAAI,SAAS,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,OAAO,GAAG,IAAI,oBAAoB,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,KAAK,CAAC,GAAG,UAA8B;IAC9C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAG,UAA8B;IACjD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAkCD;;;GAGG;AACH,SAAS,oBAAoB,CAAC,KAAmB;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC;IAC/B,MAAM,MAAM,GACV,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5D,CAAC,CAAE,MAAkC;QACrC,CAAC,CAAE,KAAiC,CAAC;IAEzC,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAExD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QACxC,CAAC,CAAC,MAAM,CAAC,OAAO;QAChB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACtC,CAAC,CAAC,MAAM,CAAC,gBAAgB;YACzB,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEjD,MAAM,OAAO,GAAgD,EAAE,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE;gBACF,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;aAC/C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACvE,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;YAC7C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;YACjB,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,WAAW,GACf,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE;YAC3D,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE;YACxB,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC;YACX,EAAE;YACF,IAAI;YACJ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,UAAU,GACd,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,sBAAsB,IAAI,MAAM,CAAC,OAAO,CAAC;IAC1E,MAAM,aAAa,GACjB,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,CAAC,IAAI,EAAE;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QACvD,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE;QACnB,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO;QACL,OAAO;QACP,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,OAAO,GAAG,IAAmD,CAAC;IACpE,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;IAC3B,IAAI,MAA0D,CAAC;IAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,GAAI,IAA2B,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC;QAClC,IACE,SAAS,KAAK,IAAI;YAClB,OAAO,SAAS,KAAK,QAAQ;YAC7B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EACxB,CAAC;YACD,MAAM,IAAI,mBAAmB,CAC3B,uHAAuH,CACxH,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAoC,CAAC;aAC1D,MAAM,CACL,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CACV,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CACjE;aACA,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,KAAK,GAAG,GAAmB,CAAC;QAClC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,MAAM,IAAI,GACR,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACjE,MAAM,aAAa,GAAG,QAAQ,CAC5B,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,gBAAgB,EACtB,KAAK,CAAC,KAAK,EAAE,OAAO,CACrB,CAAC;QACF,MAAM,SAAS,GAAG,QAAQ,CACxB,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,KAAK,EAAE,MAAM,EACnB,KAAK,CAAC,YAAY,EAAE,qBAAqB,CAC1C,CAAC;QACF,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC;YACV,EAAE;YACF,IAAI;YACJ,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAClB,GAAW,EACX,MAA0B,EAC1B,QAA8B;IAE9B,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACvE,IAAI,GAAG,KAAK,oBAAoB,EAAE,CAAC;QACjC,OAAO,CAAC,mBAAmB,CAAC,GAAG,iBAAiB,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC;QAC3B,IAAI,GAAG;YAAE,OAAO,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC;QACpC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC;IACzB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,aAAa,GAAG,UAAU,GAAG,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAA8B;IAE9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,mBAAmB,CAC3B,aAAa,OAAO,CAAC,GAAG,kFAAkF,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnE,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YACvB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;YAC3D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,mBAAmB,CAAC,mCAAmC,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GACR,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,mBAAmB,CAAC,GAAG,GAAG,aAAa,GAAG,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QAC/D,MAAM,IAAI,mBAAmB,CAC3B,GAAG,GAAG,4BAA4B,kBAAkB,QAAQ,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACrC,MAAM,IAAI,mBAAmB,CAC3B,GAAG,GAAG,4BAA4B,kBAAkB,QAAQ,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAAC,GAAG,GAAG,2BAA2B,EAAE;YAC/D,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC"}
|
|
@@ -4,6 +4,6 @@ export { OPENAI_CHAT_BRANDS, getOpenAiChatBrand, } from "./brands-openai-chat.js
|
|
|
4
4
|
export { R1_PROTOCOL_BRANDS, getR1Brand } from "./brands-r1.js";
|
|
5
5
|
export { DEFAULT_REGISTRY_BRANDS, REGISTRY_FALLBACK_MODEL, createProviderRegistry, type CreateProviderRegistryOptions, type ProviderRegistry, } from "./registry.js";
|
|
6
6
|
export { resolveLlmFromEnv } from "./from-env.js";
|
|
7
|
-
export { discoverOpenAiChatModels, ModelDiscoveryError, type DiscoverModelsRequest, type DiscoveredLlmModel, } from "./discover.js";
|
|
7
|
+
export { discoverOpenAiChatModels, ModelDiscoveryError, type DiscoverModelsRequest, type DiscoveredLlmModel, type DiscoveredLlmReasoning, } from "./discover.js";
|
|
8
8
|
export { createRoutingLlmAdapter, isRoutingLlmAdapter, type CreateRoutingLlmAdapterOptions, type LlmRouteSelection, type RoutingLlmAdapter, } from "./routing-adapter.js";
|
|
9
9
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,QAAQ,EACR,UAAU,EACV,WAAW,EACX,UAAU,EACV,eAAe,EACf,YAAY,EACZ,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,QAAQ,EACR,UAAU,EACV,WAAW,EACX,UAAU,EACV,eAAe,EACf,YAAY,EACZ,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,8BAA8B,EACnC,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,GAGvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,GAGvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,GAIpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,EACvB,mBAAmB,GAIpB,MAAM,sBAAsB,CAAC"}
|
|
@@ -8,4 +8,5 @@ export { SENSITIVE_WRITE_PATH_RULES, WRITE_CONTENT_SECURITY_RULES, createWritePa
|
|
|
8
8
|
export { POLICY_RULESET_VERSION, PolicyRulesetParseError, createPolicyEngineFromRuleset, parsePolicyRuleset, type PolicyRuleAction, type PolicyRulesetJson, type PolicyRulesetRuleJson, } from "./ruleset.js";
|
|
9
9
|
export { createPolicyEngineFromFile, decodePolicyRulesetText, loadPolicyRulesetFile, policyRulesetFormatFromPath, type PolicyRulesetFileFormat, } from "./load.js";
|
|
10
10
|
export { policyRulesetJsonSchema } from "./schema.js";
|
|
11
|
+
export { WHEN_EXPR_MAX_CHARS, WHEN_EXPR_MAX_DEPTH, WhenExprError, compileWhenExpr, evalWhenExpr, whenEnvFromSubject, type WhenEnv, } from "./when-expr.js";
|
|
11
12
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,KAAK,OAAO,GACb,MAAM,gBAAgB,CAAC"}
|
|
@@ -7,4 +7,5 @@ export { SENSITIVE_WRITE_PATH_RULES, WRITE_CONTENT_SECURITY_RULES, createWritePa
|
|
|
7
7
|
export { POLICY_RULESET_VERSION, PolicyRulesetParseError, createPolicyEngineFromRuleset, parsePolicyRuleset, } from "./ruleset.js";
|
|
8
8
|
export { createPolicyEngineFromFile, decodePolicyRulesetText, loadPolicyRulesetFile, policyRulesetFormatFromPath, } from "./load.js";
|
|
9
9
|
export { policyRulesetJsonSchema } from "./schema.js";
|
|
10
|
+
export { WHEN_EXPR_MAX_CHARS, WHEN_EXPR_MAX_DEPTH, WhenExprError, compileWhenExpr, evalWhenExpr, whenEnvFromSubject, } from "./when-expr.js";
|
|
10
11
|
//# sourceMappingURL=index.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,GAExB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,eAAe,GAKhB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,GAKtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,kBAAkB,GAInB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,GAE5B,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,GAExB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,eAAe,GAKhB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,GAKtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,kBAAkB,GAInB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,GAE5B,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,kBAAkB,GAEnB,MAAM,gBAAgB,CAAC"}
|
|
@@ -11,8 +11,14 @@ export interface PolicyRulesetRuleJson {
|
|
|
11
11
|
/**
|
|
12
12
|
* Name / id / action / scheme / op lists depending on kind.
|
|
13
13
|
* Ignored for mcp.connect / office.connect deny-all rules.
|
|
14
|
+
* Optional when `when` is set (deny/ask only).
|
|
14
15
|
*/
|
|
15
16
|
readonly names?: readonly string[];
|
|
17
|
+
/**
|
|
18
|
+
* Restricted boolean expression over the subject (`name`, `args`, …).
|
|
19
|
+
* Compiled at load; see `compileWhenExpr`. No second engine — filter only.
|
|
20
|
+
*/
|
|
21
|
+
readonly when?: string;
|
|
16
22
|
};
|
|
17
23
|
}
|
|
18
24
|
export interface PolicyRulesetJson {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ruleset.d.ts","sourceRoot":"","sources":["../src/ruleset.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,
|
|
1
|
+
{"version":3,"file":"ruleset.d.ts","sourceRoot":"","sources":["../src/ruleset.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,YAAY,EAEZ,iBAAiB,EACjB,aAAa,EACd,MAAM,YAAY,CAAC;AAepB,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,aAAa,CAAC;AAQrB,eAAO,MAAM,sBAAsB,EAAG,CAAU,CAAC;AAEjD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,KAAK,GAAG,YAAY,CAAC;AAE7D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACjC;;;;WAIG;QACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC;;;WAGG;QACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACnD;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAwND;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CA8C5E;AAED,2DAA2D;AAC3D,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAE1E"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { allowProviderIdsOnly, allowToolNamesOnly, askHostOpenActions, askToolNames, denyHostOpenActions, denyMcpConnect, denyMcpResourceServers, denyOfficeConnect, denyProviderIds, denySidebarEmbedSchemes, denySidebarFsOps, denyToolNames, } from "./rules.js";
|
|
2
2
|
import { createPolicyEngine, } from "./engine.js";
|
|
3
|
+
import { WhenExprError, compileWhenExpr, whenEnvFromSubject, } from "./when-expr.js";
|
|
3
4
|
export const POLICY_RULESET_VERSION = 1;
|
|
4
5
|
export class PolicyRulesetParseError extends Error {
|
|
5
6
|
constructor(message) {
|
|
@@ -22,6 +23,46 @@ const ACTIONS = new Set(["deny", "ask", "allow-only"]);
|
|
|
22
23
|
function isObject(v) {
|
|
23
24
|
return v !== null && typeof v === "object" && !Array.isArray(v);
|
|
24
25
|
}
|
|
26
|
+
function parseWhen(value, ruleId) {
|
|
27
|
+
if (value === undefined)
|
|
28
|
+
return undefined;
|
|
29
|
+
if (typeof value !== "string" || !value.trim()) {
|
|
30
|
+
throw new PolicyRulesetParseError(`rule ${ruleId}: match.when must be a non-empty string`);
|
|
31
|
+
}
|
|
32
|
+
try {
|
|
33
|
+
return compileWhenExpr(value);
|
|
34
|
+
}
|
|
35
|
+
catch (err) {
|
|
36
|
+
if (err instanceof WhenExprError) {
|
|
37
|
+
throw new PolicyRulesetParseError(`rule ${ruleId}: ${err.message}`);
|
|
38
|
+
}
|
|
39
|
+
throw err;
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
function withWhen(rule, when) {
|
|
43
|
+
if (when === undefined)
|
|
44
|
+
return rule;
|
|
45
|
+
return {
|
|
46
|
+
id: rule.id,
|
|
47
|
+
match(subject) {
|
|
48
|
+
if (!when(whenEnvFromSubject(subject)))
|
|
49
|
+
return undefined;
|
|
50
|
+
return rule.match(subject);
|
|
51
|
+
},
|
|
52
|
+
};
|
|
53
|
+
}
|
|
54
|
+
/** Kind-wide deny/ask used when `when` is set and `names` is omitted. */
|
|
55
|
+
function kindWide(kind, action, opts) {
|
|
56
|
+
const reason = opts.reason ?? `${action} ${kind} (when)`;
|
|
57
|
+
return {
|
|
58
|
+
id: opts.id,
|
|
59
|
+
match(subject) {
|
|
60
|
+
if (subject.kind !== kind)
|
|
61
|
+
return undefined;
|
|
62
|
+
return { verdict: action, reason, ruleId: opts.id };
|
|
63
|
+
},
|
|
64
|
+
};
|
|
65
|
+
}
|
|
25
66
|
function parseNames(value, ruleId) {
|
|
26
67
|
if (!Array.isArray(value) || value.length === 0) {
|
|
27
68
|
throw new PolicyRulesetParseError(`rule ${ruleId}: names must be a non-empty string array`);
|
|
@@ -43,8 +84,12 @@ function ruleFromJson(raw, index) {
|
|
|
43
84
|
if (typeof id !== "string" || !id.trim()) {
|
|
44
85
|
throw new PolicyRulesetParseError(`rules[${index}]: missing string id`);
|
|
45
86
|
}
|
|
46
|
-
|
|
47
|
-
|
|
87
|
+
// Bind as the union instead of `unknown`: a Set membership test does not narrow,
|
|
88
|
+
// and kindWide() only accepts "deny" | "ask" once "allow-only" has thrown.
|
|
89
|
+
const action = ACTIONS.has(raw.action)
|
|
90
|
+
? raw.action
|
|
91
|
+
: undefined;
|
|
92
|
+
if (action === undefined) {
|
|
48
93
|
throw new PolicyRulesetParseError(`rule ${id}: action must be deny|ask|allow-only`);
|
|
49
94
|
}
|
|
50
95
|
const reason = raw.reason === undefined
|
|
@@ -65,59 +110,67 @@ function ruleFromJson(raw, index) {
|
|
|
65
110
|
id,
|
|
66
111
|
...(reason !== undefined ? { reason } : {}),
|
|
67
112
|
};
|
|
113
|
+
const when = parseWhen(raw.match.when, id);
|
|
114
|
+
const finish = (rule) => withWhen(rule, when);
|
|
68
115
|
if (kind === "mcp.connect") {
|
|
69
116
|
if (action !== "deny") {
|
|
70
117
|
throw new PolicyRulesetParseError(`rule ${id}: mcp.connect only supports action deny`);
|
|
71
118
|
}
|
|
72
|
-
return denyMcpConnect(opts);
|
|
119
|
+
return finish(denyMcpConnect(opts));
|
|
73
120
|
}
|
|
74
121
|
if (kind === "office.connect") {
|
|
75
122
|
if (action !== "deny") {
|
|
76
123
|
throw new PolicyRulesetParseError(`rule ${id}: office.connect only supports action deny`);
|
|
77
124
|
}
|
|
78
|
-
return denyOfficeConnect(opts);
|
|
125
|
+
return finish(denyOfficeConnect(opts));
|
|
126
|
+
}
|
|
127
|
+
if (raw.match.names === undefined) {
|
|
128
|
+
if (when === undefined || action === "allow-only") {
|
|
129
|
+
throw new PolicyRulesetParseError(`rule ${id}: names must be a non-empty string array`);
|
|
130
|
+
}
|
|
131
|
+
return finish(kindWide(kind, action, opts));
|
|
79
132
|
}
|
|
80
133
|
const names = parseNames(raw.match.names, id);
|
|
81
134
|
if (kind === "mcp.resource") {
|
|
82
135
|
if (action !== "deny") {
|
|
83
136
|
throw new PolicyRulesetParseError(`rule ${id}: mcp.resource only supports action deny`);
|
|
84
137
|
}
|
|
85
|
-
return denyMcpResourceServers(names, opts);
|
|
138
|
+
return finish(denyMcpResourceServers(names, opts));
|
|
86
139
|
}
|
|
87
140
|
if (kind === "host.open") {
|
|
88
141
|
if (action === "allow-only") {
|
|
89
142
|
throw new PolicyRulesetParseError(`rule ${id}: host.open does not support allow-only (use deny or ask)`);
|
|
90
143
|
}
|
|
91
144
|
if (action === "ask")
|
|
92
|
-
return askHostOpenActions(names, opts);
|
|
93
|
-
return denyHostOpenActions(names, opts);
|
|
145
|
+
return finish(askHostOpenActions(names, opts));
|
|
146
|
+
return finish(denyHostOpenActions(names, opts));
|
|
94
147
|
}
|
|
95
148
|
if (kind === "sidebar.embed") {
|
|
96
149
|
if (action !== "deny") {
|
|
97
150
|
throw new PolicyRulesetParseError(`rule ${id}: sidebar.embed only supports action deny`);
|
|
98
151
|
}
|
|
99
|
-
return denySidebarEmbedSchemes(names, opts);
|
|
152
|
+
return finish(denySidebarEmbedSchemes(names, opts));
|
|
100
153
|
}
|
|
101
154
|
if (kind === "sidebar.fs") {
|
|
102
155
|
if (action !== "deny") {
|
|
103
156
|
throw new PolicyRulesetParseError(`rule ${id}: sidebar.fs only supports action deny`);
|
|
104
157
|
}
|
|
105
|
-
return denySidebarFsOps(names, opts);
|
|
158
|
+
return finish(denySidebarFsOps(names, opts));
|
|
106
159
|
}
|
|
107
160
|
if (kind === "tool.call") {
|
|
108
161
|
if (action === "deny")
|
|
109
|
-
return denyToolNames(names, opts);
|
|
162
|
+
return finish(denyToolNames(names, opts));
|
|
110
163
|
if (action === "ask")
|
|
111
|
-
return askToolNames(names, opts);
|
|
112
|
-
return allowToolNamesOnly(names, opts);
|
|
164
|
+
return finish(askToolNames(names, opts));
|
|
165
|
+
return finish(allowToolNamesOnly(names, opts));
|
|
113
166
|
}
|
|
114
167
|
// provider.use
|
|
115
168
|
if (action === "ask") {
|
|
116
169
|
throw new PolicyRulesetParseError(`rule ${id}: provider.use does not support ask (use deny or allow-only)`);
|
|
117
170
|
}
|
|
118
171
|
if (action === "deny")
|
|
119
|
-
return denyProviderIds(names, opts);
|
|
120
|
-
return allowProviderIdsOnly(names, opts);
|
|
172
|
+
return finish(denyProviderIds(names, opts));
|
|
173
|
+
return finish(allowProviderIdsOnly(names, opts));
|
|
121
174
|
}
|
|
122
175
|
/**
|
|
123
176
|
* Parse a policy ruleset JSON document into engine options.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"ruleset.js","sourceRoot":"","sources":["../src/ruleset.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"ruleset.js","sourceRoot":"","sources":["../src/ruleset.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,GAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,eAAe,EACf,kBAAkB,GAEnB,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAU,CAAC;AA8BjD,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAoB;IACvC,WAAW;IACX,cAAc;IACd,aAAa;IACb,cAAc;IACd,WAAW;IACX,eAAe;IACf,YAAY;IACZ,gBAAgB;CACjB,CAAC,CAAC;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAClE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;AAEzE,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAChB,KAAc,EACd,MAAc;IAEd,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,MAAM,yCAAyC,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,MAAM,IAAI,uBAAuB,CAAC,QAAQ,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,IAAgB,EAChB,IAA6C;IAE7C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,CAAC,OAAO;YACX,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YACzD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,QAAQ,CACf,IAAuB,EACvB,MAAsB,EACtB,IAAuD;IAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,MAAM,IAAI,IAAI,SAAS,CAAC;IACzD,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,CAAC,OAAO;YACX,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,MAAc;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,MAAM,0CAA0C,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,MAAM,2CAA2C,CAC1D,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,GAAY,EAAE,KAAa;IAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,uBAAuB,CAAC,SAAS,KAAK,oBAAoB,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;IAClB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,uBAAuB,CAAC,SAAS,KAAK,sBAAsB,CAAC,CAAC;IAC1E,CAAC;IACD,iFAAiF;IACjF,2EAA2E;IAC3E,MAAM,MAAM,GAAiC,OAAO,CAAC,GAAG,CACtD,GAAG,CAAC,MAA0B,CAC/B;QACC,CAAC,CAAE,GAAG,CAAC,MAA2B;QAClC,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EAAE,sCAAsC,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GACV,GAAG,CAAC,MAAM,KAAK,SAAS;QACtB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC9B,CAAC,CAAC,GAAG,CAAC,MAAM;YACZ,CAAC,CAAC,CAAC,GAAG,EAAE;gBACJ,MAAM,IAAI,uBAAuB,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;YACzE,CAAC,CAAC,EAAE,CAAC;IAEb,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,uBAAuB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAyB,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EAAE,gDAAgD,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG;QACX,EAAE;QACF,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,IAAgB,EAAc,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEtE,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EAAE,yCAAyC,CACpD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EAAE,4CAA4C,CACvD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAClD,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EAAE,0CAA0C,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE9C,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EAAE,0CAA0C,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EAAE,2DAA2D,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EAAE,2CAA2C,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EAAE,wCAAwC,CACnD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,eAAe;IACf,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,uBAAuB,CAC/B,QAAQ,EAAE,8DAA8D,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,sBAAsB,EAAE,CAAC;QACxD,MAAM,IAAI,uBAAuB,CAC/B,uBAAuB,MAAM,CAAC,OAAO,CAAC,eAAe,CACtD,CAAC;IACJ,CAAC;IAED,IAAI,QAA+C,CAAC;IACpD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,uBAAuB,CAAC,4BAA4B,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,CAAC,GAAsD,EAAE,CAAC;QAChE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAsB,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,uBAAuB,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAkB,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,uBAAuB,CAC/B,YAAY,CAAC,0BAA0B,CACxC,CAAC;YACJ,CAAC;YACD,CAAC,CAAC,CAAsB,CAAC,GAAG,CAAkB,CAAC;QACjD,CAAC;QACD,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,uBAAuB,CAAC,wBAAwB,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,OAAO,kBAAkB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC"}
|
|
@@ -76,6 +76,12 @@ export declare const policyRulesetJsonSchema: {
|
|
|
76
76
|
};
|
|
77
77
|
readonly minItems: 1;
|
|
78
78
|
};
|
|
79
|
+
readonly when: {
|
|
80
|
+
readonly type: "string";
|
|
81
|
+
readonly minLength: 1;
|
|
82
|
+
readonly maxLength: 512;
|
|
83
|
+
readonly description: "Optional restricted boolean filter over the subject (name, args, path). Not a second policy engine.";
|
|
84
|
+
};
|
|
79
85
|
};
|
|
80
86
|
};
|
|
81
87
|
};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,uBAAuB
|
|
1
|
+
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqE1B,CAAC"}
|
|
@@ -57,6 +57,12 @@ export const policyRulesetJsonSchema = {
|
|
|
57
57
|
items: { type: "string", minLength: 1 },
|
|
58
58
|
minItems: 1,
|
|
59
59
|
},
|
|
60
|
+
when: {
|
|
61
|
+
type: "string",
|
|
62
|
+
minLength: 1,
|
|
63
|
+
maxLength: 512,
|
|
64
|
+
description: "Optional restricted boolean filter over the subject (name, args, path). Not a second policy engine.",
|
|
65
|
+
},
|
|
60
66
|
},
|
|
61
67
|
},
|
|
62
68
|
},
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,GAAG,EAAE,iDAAiD;IACtD,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,oDAAoD;IACtD,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,CAAC,SAAS,CAAC;IACrB,oBAAoB,EAAE,KAAK;IAC3B,UAAU,EAAE;QACV,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;QACrB,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBAC/C,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBAClD,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBACjD,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBAClD,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBAC/C,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBACnD,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBAChD,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;aACrD;SACF;QACD,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC;gBACnC,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;oBACpC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE;oBAC/C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC1B,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,QAAQ,EAAE,CAAC,MAAM,CAAC;wBAClB,oBAAoB,EAAE,KAAK;wBAC3B,UAAU,EAAE;4BACV,IAAI,EAAE;gCACJ,IAAI,EAAE;oCACJ,WAAW;oCACX,cAAc;oCACd,aAAa;oCACb,cAAc;oCACd,WAAW;oCACX,eAAe;oCACf,YAAY;oCACZ,gBAAgB;iCACjB;6BACF;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,OAAO;gCACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gCACvC,QAAQ,EAAE,CAAC;6BACZ;yBACF;qBACF;iBACF;aACF;SACF;KACF;CACO,CAAC"}
|
|
1
|
+
{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,GAAG,EAAE,iDAAiD;IACtD,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,oDAAoD;IACtD,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,CAAC,SAAS,CAAC;IACrB,oBAAoB,EAAE,KAAK;IAC3B,UAAU,EAAE;QACV,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;QACrB,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE;gBACV,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBAC/C,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBAClD,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBACjD,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBAClD,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBAC/C,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBACnD,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;gBAChD,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;aACrD;SACF;QACD,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC;gBACnC,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;oBACpC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE;oBAC/C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC1B,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,QAAQ,EAAE,CAAC,MAAM,CAAC;wBAClB,oBAAoB,EAAE,KAAK;wBAC3B,UAAU,EAAE;4BACV,IAAI,EAAE;gCACJ,IAAI,EAAE;oCACJ,WAAW;oCACX,cAAc;oCACd,aAAa;oCACb,cAAc;oCACd,WAAW;oCACX,eAAe;oCACf,YAAY;oCACZ,gBAAgB;iCACjB;6BACF;4BACD,KAAK,EAAE;gCACL,IAAI,EAAE,OAAO;gCACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gCACvC,QAAQ,EAAE,CAAC;6BACZ;4BACD,IAAI,EAAE;gCACJ,IAAI,EAAE,QAAQ;gCACd,SAAS,EAAE,CAAC;gCACZ,SAAS,EAAE,GAAG;gCACd,WAAW,EACT,qGAAqG;6BACxG;yBACF;qBACF;iBACF;aACF;SACF;KACF;CACO,CAAC"}
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Restricted boolean expressions for policy ruleset `match.when`.
|
|
3
|
+
*
|
|
4
|
+
* Hand-rolled — no `eval` / `vm` / Function. Grammar is a boolean subset with
|
|
5
|
+
* subject bindings and a tiny string/RegExp method whitelist. Unknown
|
|
6
|
+
* identifiers, assignment, and prototype walks are rejected at compile time.
|
|
7
|
+
*
|
|
8
|
+
* Does **not** introduce a second policy engine: ruleset JSON stays the only
|
|
9
|
+
* surface; `when` is an optional filter on an existing rule.
|
|
10
|
+
*/
|
|
11
|
+
import type { PolicySubject } from "./types.js";
|
|
12
|
+
export declare class WhenExprError extends Error {
|
|
13
|
+
constructor(message: string);
|
|
14
|
+
}
|
|
15
|
+
/** Max source length (chars). */
|
|
16
|
+
export declare const WHEN_EXPR_MAX_CHARS = 512;
|
|
17
|
+
/** Max AST depth while compiling. */
|
|
18
|
+
export declare const WHEN_EXPR_MAX_DEPTH = 32;
|
|
19
|
+
/** Bindings exposed to `when` (frozen plain data only). */
|
|
20
|
+
export type WhenEnv = Readonly<Record<string, unknown>>;
|
|
21
|
+
/** Compile subject → env once per evaluate. */
|
|
22
|
+
export declare function whenEnvFromSubject(subject: PolicySubject): WhenEnv;
|
|
23
|
+
/**
|
|
24
|
+
* Compile a `when` source string. Throws {@link WhenExprError} on syntax /
|
|
25
|
+
* safety violations (fail closed at ruleset load).
|
|
26
|
+
*/
|
|
27
|
+
export declare function compileWhenExpr(source: string): (env: WhenEnv) => boolean;
|
|
28
|
+
/** Evaluate `when` against a subject (compile + run). */
|
|
29
|
+
export declare function evalWhenExpr(source: string, subject: PolicySubject): boolean;
|
|
30
|
+
//# sourceMappingURL=when-expr.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"when-expr.d.ts","sourceRoot":"","sources":["../src/when-expr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED,iCAAiC;AACjC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,qCAAqC;AACrC,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAkBtC,2DAA2D;AAC3D,MAAM,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAExD,+CAA+C;AAC/C,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CA4ClE;AAiBD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAuBzE;AAED,yDAAyD;AACzD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAE5E"}
|